CVE-2019-19091

ABB eSOMS: HTTP response information leakage

State: Published
Severity: 4.3 Medium
Published: Apr 2, 2020
Updated: Aug 5, 2024
Reserved: Nov 18, 2019

Description

For ABB eSOMS versions 4.0 to 6.0.3, HTTPS responses contain comments with sensitive information about the application. An attacker might use this detail information to specifically craft the attack.

Scores

CVSS	Score	Vector	Source
3.1	4.3 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	ABB

Weaknesses

CWE-16 Configuration
CWE-202 Exposure of Sensitive Data Through Data Queries

Affected Products

Product	Versions
eSOMSABB	4.0 to 6.0.3Affected

References

https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.